EP2979418B1 - Method to establish a secure voice communication using generic bootstrapping architecture - Google Patents
Method to establish a secure voice communication using generic bootstrapping architecture Download PDFInfo
- Publication number
- EP2979418B1 EP2979418B1 EP14710323.8A EP14710323A EP2979418B1 EP 2979418 B1 EP2979418 B1 EP 2979418B1 EP 14710323 A EP14710323 A EP 14710323A EP 2979418 B1 EP2979418 B1 EP 2979418B1
- Authority
- EP
- European Patent Office
- Prior art keywords
- naf
- user equipment
- session key
- key
- keys
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000004891 communication Methods 0.000 title claims description 50
- 238000000034 method Methods 0.000 title claims description 32
- 230000006870 function Effects 0.000 claims description 28
- 238000004364 calculation method Methods 0.000 claims description 23
- 101001002709 Homo sapiens Interleukin-4 Proteins 0.000 claims description 18
- 102100020941 Interleukin-4 Human genes 0.000 claims description 18
- 102100039292 Cbp/p300-interacting transactivator 1 Human genes 0.000 claims description 12
- 101000888413 Homo sapiens Cbp/p300-interacting transactivator 1 Proteins 0.000 claims description 12
- 101100396152 Arabidopsis thaliana IAA19 gene Proteins 0.000 claims description 10
- 101100274486 Mus musculus Cited2 gene Proteins 0.000 claims description 10
- 101150096622 Smr2 gene Proteins 0.000 claims description 10
- 238000009795 derivation Methods 0.000 claims description 9
- 230000004044 response Effects 0.000 claims description 7
- 238000012545 processing Methods 0.000 claims description 5
- 101001076408 Homo sapiens Interleukin-6 Proteins 0.000 description 6
- 102100026019 Interleukin-6 Human genes 0.000 description 6
- 230000009471 action Effects 0.000 description 3
- 230000008901 benefit Effects 0.000 description 2
- 238000012546 transfer Methods 0.000 description 2
- 230000001413 cellular effect Effects 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0431—Key distribution or pre-distribution; Key agreement
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
Definitions
- the present invention relates to a method to establish a secure voice communication session between two user equipments.
- "user” means a subscriber to a certain mobile network service (MNO). More particularly the invention relates to the implementation of such secure voice communication in the context of Generic Bootstrapping Architecture.
- MNO mobile network service
- the invention also pertains to network application functions (NAF) and to a GBA compliant user equipment able to implement steps of the method of the invention.
- NAF network application functions
- GBA Generic Bootstrapping Architecture
- HLR Home Location Register
- HSS Home Subscriber Server
- GBA is standardized at the 3GPP.
- 3GPP TS 33.220 specifies Generic Bootstrapping Architecture (GBA), which allows a User Equipment (UE) and a Network Application Function server (NAF) to share a secret by interacting with Bootstrapping Server Function (BSF).
- GBA Generic Bootstrapping Architecture
- UE User Equipment
- NAF Network Application Function server
- BSF Bootstrapping Server Function
- the user authentication is instantiated by a shared secret between the user in a smartcard inside his/her mobile equipment and the other is on the HLR/HSS.
- GBA bootstrapping authenticates the user by sending a network component challenge to the user's card and verify that the answer is similar to the one predicted by the HLR/HSS.
- the architecture includes the user equipment (UE), i.e a Mobile Equipment (ME, e.g. a mobile cellular telephone) including a smart card (a UICC), that needs access to a specific service, an application server (NAF: Network Application Function), e. g. for mobile TV, that provides the service, a Bootstrapping Server Function (BSF), that arranges security relation between UE and NAF thanks to its connection with the HSS, a mobile network operator's Home Subscriber Server (HSS), that hosts user profiles.
- UE user equipment
- ME Mobile Equipment
- UICC User Equipment
- NAF Network Application Function
- BSF Bootstrapping Server Function
- HSS Home Subscriber Server
- the term 'bootstrapping' is related to building a security relation with a previously unknown device first and to allow installing security elements (keys) in the device and the BSF afterwards.
- the BSF instead of asking a service provider NAF to rely on HLR or HSS for every key establishment request, the BSF establishes a shared secret between the user's card and the service provider NAF.
- This shared secret is limited in time and for a specific domain.
- the secret derived via GAA/GBA procedure can be used for further communication between the UE (composed of ME and UICC) and the NAF.
- One advantage is that there is no need for user enrollment phase nor secure deployment of keys, making this solution a very low cost one compared to PKI. It is also easy to integrate the authentication method into terminals and service providers, as it is based on HTTP's "Digest access authentication". Every Web server already implement HTTP digest authentication and the effort to implement GBA on top of digest authentication is thus minimal.
- an HTTP client Web browser
- Direct communications with the smart card through APDU via the BaseBand of the device are used.
- GBA nevertheless does not apply for any communication between two or more parties and even less voice communication.
- further alternative and advantageous solutions relative to the GBA would, accordingly, be desirable in the art.
- GBA based UICC is called GBA_U UICC.
- the present invention aims at securing voice communication without requiring the use of dedicated infrastructure.
- the present invention thus proposes a method to establish a secure voice communication session between two user equipments with the help of a dedicated Network Application Functions (NAF) and of at least one Bootstrapping Server Function (BSF), comprising the steps of:
- NAF Network Application Functions
- BSF Bootstrapping Server Function
- the invention While using the GBA authentication of each user on each side of a voice communication, the invention enables to base a secure voice communication on the GBA architecture without requiring further implementation of security features.
- the invention involves an extension of NAF capability, which is based on GBA infrastructure. And eventually, the function of GBA compliant UICC is also enhanced. With the invention a mobile network operator can offer security related services leveraging GBA infrastructure without needing to upgrade UICCs deployed in the field. It is here noted that the number of user equipments could be increased while remaining under the scope of the invention.
- the used key materials are the ones defined in 3GPP TS 33.220 or TS 33.110.
- the NAF possesses the following key materials for each user: RAND, B-TID, Ks_ext_NAF, Ks_int_NAF, other attributes, like key lifetime, UICCType, and so forth.
- said step of calculation of the session key is performed by the NAF that further sends the key session to both equipments encrypted with respective NAF keys.
- This embodiment is adapted to any configuration where the UICC is not GBA_U.
- the encryption of the session key by the NAF for this user equipment uses an internal NAF key.
- the method includes a step of generation by the NAF of two messages comprising data to be used to calculate the session key, each message comprising, for a given equipment, at least a NAF key of the other equipment encrypted with the own NAF key of said given equipment, a step of sending the encrypted messages to both equipments and, for each equipment, a step of decryption of the encrypted message and a step of calculation of the session key from its own derived NAF key and the other user equipment's NAF key received in the message.
- External NAF key can be transferred and external or internal NAF key can be used for encryption. It is necessary for the both calculations to have the same inputs.
- the same pair of NAF key, one for the first user equipment and the second for the second equipment, has to be known on both calculation sides.
- Messages thus include the complementary NAF key for the calculation of the session key.
- Such KeyMaterials e.g User_Param, Ks_NAF, other attributes
- Preferably transferred NAF keys are external NAF keys.
- GBA standard is currently not open to the transfer of internal NAF keys since according to GBA principle the internal NAF key shall never leave the UICC of a user equimement and shall not be shared with another user equipment for security reasons.
- Ks_ext_NAF and thus not internal NAF key, of another user can be seen by the user of a mobile equipment in case the message exchanged between the mobile equipment and the NAF is encrypted with Ks_ext_NAF of the mobile equipment.
- Ks_ext_NAF Ks_ext_NAF
- At least one user equipment comprising a GBA_U compliant UICC
- the encryption of the NAF key of the other equipment for this user equipment uses the internal NAF key for this user equipment.
- the UICC further comprising a calculation module to calculate the session key, the session key is calculated inside the UICC.
- first and second BSF being the same BSF
- the NAF keys or the session key are calculated by this BSF, is retrieved by the NAF and sent to the user equipments encrypted with respective NAF keys.
- This feature centralizes the calculation of session key inside the BSF which can be preferable for the MNO or required by the MNO.
- the invention also concerns a Network Application Functions (NAF) server comprising:
- the invention also relates to a GBA compliant user equipment comprising:
- such GBA compliant user equipment comprises an UICC including said challenge processing module, said key derivation module and said decryption module.
- Such user equipment can implement some of the preferred embodiments of the invention where the decryption of the message for constructing the session key or of the session key itself is realized inside the UICC.
- said UICC further includes said calculation module.
- Such a user equipment is able to implement the preferred embodiment and option of the invention where the session key is calculated inside the UICC guaranteeing the strongest security.
- a true end to end security for user-to-user communication can be achieved without requiring physical replacement of UICC deployed in the field.
- the mechanism is generic and can be applied to any type of user-to-user secure communication.
- one or more embodiments comprise the features hereinafter fully described and particularly pointed out in the claims.
- Figure 1 shows a GBA environment where the invention finds its application. It comprises at least an user equipment UE connected to a Network Application Function NAF through a first interface Ua and to a Bootstrapping Server Function BSF through a second interface Ub. The both functions NAF and BSF are connected to each other through an interface Zn.
- NAF Network Application Function
- BSF Bootstrapping Server Function
- the BSF is further connected to at least a Home Subscriber Server HSS through an interface Zh.
- the BSF is also connected to a Subscriber Locator Function SLF through an interface Dz. Names of different functions and interfaces are standardized in the Generic Bootstrapping Architecture standard.
- FIG. 2 schematically shows an embodiment of the invention where a session key is calculated by the NAF.
- a first user equipment UE1 comprises a GBA compliant integrated circuit UICC1.
- Such an integrated circuit UICC1 is typically a smart card introduced inside a mobile equipment ME1 also GBA compliant.
- This mobile equipment ME1 is advantageously a smart-phone but could also be a computer. It has however necessarily to be GBA compliant.
- the invention intervenes when the user of the user equipment UE1 requests a secure voice communication to be established with another user having a second user equipment UE2.
- the UE1 sends a request of communication REQ(ID1,ID2) to the second user equipment UE2 typically e.g. via an underlying IP Multimedia Subsystem (IMS).
- This request of communication REQ(ID1,ID2) includes the identifiers ID1 and ID2 of the two user equipments.
- UE1 sends a request for security association REQ(ID1,ID2,SEC) for this voice communication to a dedicated Network Application Function NAF. This triggers the establishment of a link with a Bootstrapping Server Function BSF1.
- This BSF1 is for example the one of the Mobile Network Operator of UE1. If no valid bootstrapped key Ks is available in the UE1, an initial bootstrapping procedure designated by curly bracket CH1(NAF) is thus launched between UE1 and BSF1.
- a challenge is generally sent to the user equipment UE1 that gives a response in return. The entire security is thus based on MNO's credential used to authenticate one subscriber.
- the UICC1 is implicated in the challenge response calculation. Once the challenge response is sent back to the BSF1 and also verified by the BSF1, this last one proceeds to a bootstrapped key derivation procedure to obtain bootstrapped key Ks1.
- the NAF sends request to the BSF1 in order to retrieve the NAF keys associated to the UE1.
- UE1 comprises a GBA compliant UICC1
- two NAF keys are obtained, one external Ks_ext_NAF1 and one internal Ks_int_NAF1. Those keys are then sent to the NAF by the BSF1.
- the other user equipment UE2 that received the request for communication REQ(ID1,ID2) sends a request for security association REQ(ID1,ID2,SEC) to NAF.
- This launches an initial bootstrapping procedure between UE2 and a second BSF2 if no valid bootstrapped key is available in the UE2. It implies the UICC2 being implicated according to the GBA requirements even if this UICC is not GBA compliant. Said procedure is designated by curly brackets CH2(NAF). Indeed, the two BSF could be the same, e.g. if the same MNO is used by the two user equipments but, on a general base, they are different.
- the second UE2 consists of a mobile equipment ME2 itself GBA compliant and a UICC that is not GBA compliant.
- the BSF proceeds to key derivation for the concerned NAF from a bootstrapped key Ks2.
- Ks_NAF2 is obtained.
- This key which is of the external type (belonging to the mobile equipment ME2), is then transferred to the NAF.
- the NAF is then calculating a session key Ks_SV for the secure voice communication in a step CAL(Ks_SV).
- the session key Ks_SV is encrypted differently depending on the recipient UE1 or UE2.
- the session key calculation can also be performed in the BSF.
- Ks_SV KDF(Ks_int_NAF_1, Ks_int_NAF_2, User_Param_1, User_Param_2, 8)
- User Param can be RAND, B-TID, and other attributes associated to each user's Ks_int_NAF.
- the session key (Ks_SV) Ks_ext_NAF1 encrypted with Ks_ext_NAF1 is sent to UE1 and (Ks_SV) Ks_NAF2 encrypted with Ks_NAF2 is sent to UE2.
- the session key is then decrypted DEC Ks_ext_NAF1 (Ks_SV), DEC Ks_NAF2 (Ks_SV) by mobile equipments ME1 and ME2 using respectively Ks_ext_NAF1 and Ks_NAF2.
- the communication SV can take place using the common session key Ks_SV between the two user equipments UE1 and UE2.
- session key Ks_SV can be encrypted using the internal NAF key Ks_int_NAF1.
- the decryption DEC Ks_int_NAF1 Ks_SV
- Ks_SV decryption DEC Ks_int_NAF1
- the session key is then transferred internally to the mobile equipment ME1 for use in the secure voice communication SV.
- ETSI TS 102 484 secure channel between ME and UICC.
- ETSI TS102 484 secure channel one additional control on the UICC side can be implemented in order to reinforce the security of the entire system. The control is to allow access to GBA functionality only if the following conditions are met:
- Figure 3 shows another embodiment of the invention where the session key is calculated locally by each of the both user equipments UE1 and UE2 using messages generated and sent by NAF.
- the beginning of the method is identical with the one shown on figure 2 .
- An initial bootstrapping procedure is implemented on both sides with the two user equipments.
- Ks_NAF2 and Ks_int_NAF1, Ks_ext_NAF1 it generates in a step GEN(MSG1,MSG2) two encrypted messages MSG1 and MSG2 each being intended to be sent to each one of the equipments UE1 and UE2.
- the message MSG2 intended to be sent in a step SD(MSG2) to UE2 includes at least the external NAF key of ME1 encrypted with the NAF key of ME2.
- the internal NAF key of UICC1 is kept inside the NAF and is not threaten by any leak.
- Messages may further include identifiers and other data, for example a random that could be used for the derivation of the session key.
- the message MSG1 intended to be sent in a step SD(MSG1) to UE1 includes at least the NAF key of ME2 encrypted with the external NAF key of ME1.
- This option corresponds to a case where the session key Ks_SV is calculated in a step CAL in the mobile equipment ME1 in a way similar to the one implemented in UE2. This stands after the decryption DEC of the encrypted message MSG1 using the external NAF key of ME1.
- the NAF key of the mobile equipment ME2 is encrypted using the internal NAF key of the user equipment UE1.
- the calculation of the session key Ks_SV can be done after transfer of the decrypted Ks_NAF2 by the UICC1 to the mobile equipment ME1 or directly inside UICC1 if the necessary resources are available in UICC1 as illustrated after the second OR.
- FIG. 4 schematically shows a user equipment UE wherein the invention is implemented.
- UE comprises a mobile equipment ME, typically a mobile phone, an integrated circuit card UICC and communication means CM including at least: a transmitter adapted to transmit requests of communication with another user equipment,
- Such communication means are not further disclosed as the man skilled in the art will be able to implement such means that can be based on wireless interfaces, advantageously, or on wired interfaces.
- the role of UICC is fundamental as UICCs constitute distributed security tokens.
- FIG. 5 shows schematically an integrated circuit card GBA compliant UICC1 as implemented inside the user equipment of figure 4 .
- This UICC1 comprises a challenge processing module CPM to respond a challenge received from a BSF, a key derivation module KDM, a decryption module DM to decrypt a message containing data to calculate a session key or containing directly a session key.
- a decryption module DM to decrypt a message containing data to calculate a session key or containing directly a session key.
- UICC1 is here described with partitioned entities while such entities could be only functionality implemented inside the UICC.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Mobile Radio Communication Systems (AREA)
Description
- The present invention relates to a method to establish a secure voice communication session between two user equipments. In the invention. "user" means a subscriber to a certain mobile network service (MNO). More particularly the invention relates to the implementation of such secure voice communication in the context of Generic Bootstrapping Architecture.
- The invention also pertains to network application functions (NAF) and to a GBA compliant user equipment able to implement steps of the method of the invention.
- In mobile phones, Generic Bootstrapping Architecture (GBA) is one technology enabling the establishment of shared keys between a User Equipment and any Application Server thanks to the 3GPP user authentication. This 3GPP user authentication is possible if the user owns a valid identity on a Home Location Register (HLR) or a Home Subscriber Server (HSS).
- GBA is standardized at the 3GPP. 3GPP TS 33.220 specifies Generic Bootstrapping Architecture (GBA), which allows a User Equipment (UE) and a Network Application Function server (NAF) to share a secret by interacting with Bootstrapping Server Function (BSF). The user authentication is instantiated by a shared secret between the user in a smartcard inside his/her mobile equipment and the other is on the HLR/HSS.
- GBA bootstrapping authenticates the user by sending a network component challenge to the user's card and verify that the answer is similar to the one predicted by the HLR/HSS.
- The architecture includes the user equipment (UE), i.e a Mobile Equipment (ME, e.g. a mobile cellular telephone) including a smart card (a UICC), that needs access to a specific service, an application server (NAF: Network Application Function), e. g. for mobile TV, that provides the service, a Bootstrapping Server Function (BSF), that arranges security relation between UE and NAF thanks to its connection with the HSS, a mobile network operator's Home Subscriber Server (HSS), that hosts user profiles.
- The term 'bootstrapping' is related to building a security relation with a previously unknown device first and to allow installing security elements (keys) in the device and the BSF afterwards.
- Thus, instead of asking a service provider NAF to rely on HLR or HSS for every key establishment request, the BSF establishes a shared secret between the user's card and the service provider NAF. This shared secret is limited in time and for a specific domain.
- The secret derived via GAA/GBA procedure can be used for further communication between the UE (composed of ME and UICC) and the NAF. One advantage is that there is no need for user enrollment phase nor secure deployment of keys, making this solution a very low cost one compared to PKI. It is also easy to integrate the authentication method into terminals and service providers, as it is based on HTTP's "Digest access authentication". Every Web server already implement HTTP digest authentication and the effort to implement GBA on top of digest authentication is thus minimal.
- On device side is needed an HTTP client (Web browser) implementing digest authentication and the special case designed by a "3gpp" string in the HTTP header and a mean to dialog with a smartcard and to sign a challenge sent by the BSF. Direct communications with the smart card through APDU via the BaseBand of the device are used. GBA nevertheless does not apply for any communication between two or more parties and even less voice communication. As there is a need to secure such voice communication when carried on the web, further alternative and advantageous solutions relative to the GBA would, accordingly, be desirable in the art.
- Further, GBA based UICC is called GBA_U UICC.
- The present invention aims at securing voice communication without requiring the use of dedicated infrastructure.
- The present invention thus proposes a method to establish a secure voice communication session between two user equipments with the help of a dedicated Network Application Functions (NAF) and of at least one Bootstrapping Server Function (BSF), comprising the steps of:
- for a first user equipment, sending a request of communication with a second user equipment and a request for security association to a dedicated Network Application Function,
- for the first user equipment, proceeding to a challenge procedure comprising:
- for the first user equipment, establishing a link with a first Bootstrapping Server Function BSF1,
- for the BSF1, transmitting a challenge to the first user equipment,
- for the first user equipment, responding to the challenge transmitted by the BSF1,
- for the BSF1, verifying the challenge response,
- for the NAF, retrieving bootstrapping service derived NAF keys from the BSF1,
- for the second user equipment, receiving a request for communication with the first user equipment,
- for the second user equipment, sending a request for security association to a dedicated Network Application Function,
- for the second user equipment, proceeding to a challenge procedure comprising:
- for the second user equipment, establishing a link with a second Bootstrapping Server Function BSF2,
- for the BSF2, transmitting a challenge to the second user equipment,
- for the second user equipment, responding to a challenge transmitted by the BSF2,
- for the BSF2, verifying the challenge response,
- for the NAF, retrieving bootstrapping service derived NAF keys from the BSF2,
- calculating a session key from bootstrapping service derived NAF keys of the first and the second user equipments and
- establishing a secured voice communication using the calculated session key.
- While using the GBA authentication of each user on each side of a voice communication, the invention enables to base a secure voice communication on the GBA architecture without requiring further implementation of security features. The invention involves an extension of NAF capability, which is based on GBA infrastructure. And eventually, the function of GBA compliant UICC is also enhanced. With the invention a mobile network operator can offer security related services leveraging GBA infrastructure without needing to upgrade UICCs deployed in the field. It is here noted that the number of user equipments could be increased while remaining under the scope of the invention. The used key materials are the ones defined in 3GPP TS 33.220 or TS 33.110.
- Basically, the NAF possesses the following key materials for each user: RAND, B-TID, Ks_ext_NAF, Ks_int_NAF, other attributes, like key lifetime, UICCType, and so forth.
- According to a first embodiment, said step of calculation of the session key is performed by the NAF that further sends the key session to both equipments encrypted with respective NAF keys.
- This embodiment is adapted to any configuration where the UICC is not GBA_U.
- Advantageously, in case where there is at least one of the user equipment comprising a GBA_U compliant UICC, the encryption of the session key by the NAF for this user equipment uses an internal NAF key.
- This enables the session key to be decrypted in the UICC itself and to enhance security.
- According to a second embodiment, the method includes a step of generation by the NAF of two messages comprising data to be used to calculate the session key, each message comprising, for a given equipment, at least a NAF key of the other equipment encrypted with the own NAF key of said given equipment, a step of sending the encrypted messages to both equipments and, for each equipment, a step of decryption of the encrypted message and a step of calculation of the session key from its own derived NAF key and the other user equipment's NAF key received in the message.
- External NAF key can be transferred and external or internal NAF key can be used for encryption. It is necessary for the both calculations to have the same inputs. The same pair of NAF key, one for the first user equipment and the second for the second equipment, has to be known on both calculation sides. Messages thus include the complementary NAF key for the calculation of the session key. Such KeyMaterials (e.g User_Param, Ks_NAF, other attributes) are sent to each user equipment from the NAF over Ua secure tunnel.
- Preferably transferred NAF keys are external NAF keys.
- In fact, GBA standard is currently not open to the transfer of internal NAF keys since according to GBA principle the internal NAF key shall never leave the UICC of a user equimement and shall not be shared with another user equipment for security reasons. With this feature only Ks_ext_NAF, and thus not internal NAF key, of another user can be seen by the user of a mobile equipment in case the message exchanged between the mobile equipment and the NAF is encrypted with Ks_ext_NAF of the mobile equipment. Thus, it is theoretically possible for a user to observe and retrieve Ks_ext_NAF of other users. And later, he/she can use those obtained keys fraudulently to masquerade another user for instance. This solution is not thus completely secure.
- According to a preferred feature, at least one user equipment comprising a GBA_U compliant UICC, the encryption of the NAF key of the other equipment for this user equipment uses the internal NAF key for this user equipment.
- This avoids the mobile equipment having the GBA compliant UICC from knowing the key materials of the other user equipment. The internal NAF key of the other equipment is in fact known only by the NAF and from the UICC inside the mobile equipment. Preferably, both equipments are in this situation. The sending of the internal NAF keys of each UICC to the other could thus be avoided. This encryption procedure prevents a vicious user from trying to eavesdrop the communication in the middle and to collect the other users' keys, so that he/she can use them for fraudulent actions later on. It is here noted that, if a non GBA_U compliant UICC is able to derive keys by any other means than by the GBA_U compliance, such feature can been implemented.
- According to an advantageous feature, the UICC further comprising a calculation module to calculate the session key, the session key is calculated inside the UICC.
- This implies the use of a GBA_U compliant UICC. It has here to be noted that a user can compute all the keys theoretically by monitoring the communication between the ME and the UICC. It is thus highly recommended to make the UICC compute the session key instead of the ME as stated in this advantageous embodiment.
- According to a particular feature, first and second BSF being the same BSF, the NAF keys or the session key are calculated by this BSF, is retrieved by the NAF and sent to the user equipments encrypted with respective NAF keys.
- This feature centralizes the calculation of session key inside the BSF which can be preferable for the MNO or required by the MNO.
- The invention also concerns a Network Application Functions (NAF) server comprising:
- a receiver to receive, from user equipments, requests of communication with another user equipment;
- a retriever to retrieve bootstrapping service derived keys Ks_(ext/int)_NAF from at least one BSF for the two user equipments;
- a calculation module to calculate a session key or to generate a message from bootstrapping service derived NAF keys Ks_(ext/int)_NAF1 and Ks_(ext/int)_NAF2;
- an encryption module to encrypt the session key or the message using respective user equipment's NAF keys;
- a transmitter to send the encrypted session key or to send the generated message for constructing the session key that will enable each user equipment to calculate the common session key.
- The invention also relates to a GBA compliant user equipment comprising:
- a challenge processing module to respond a challenge received from a BSF,
- a key derivation module,
- a communication module comprising at least:
- a transmitter to transmit requests of communication with another user equipment,
- a receiver to receive requests of communication from another user equipment and receive a message for constructing a session key or receive an encrypted session key,
- a voice communication module to establish a communication with another equipment using said session key,
- a decryption module to decrypt a message for constructing the session key or a session key,
- in the case a message for constructing the session key is received, a calculation module to calculate the session key from the message.
- Advantageously, such GBA compliant user equipment comprises an UICC including said challenge processing module, said key derivation module and said decryption module.
- Such user equipment can implement some of the preferred embodiments of the invention where the decryption of the message for constructing the session key or of the session key itself is realized inside the UICC.
- Preferably, said UICC further includes said calculation module.
- Such a user equipment is able to implement the preferred embodiment and option of the invention where the session key is calculated inside the UICC guaranteeing the strongest security.
- With the invention, a true end to end security for user-to-user communication can be achieved without requiring physical replacement of UICC deployed in the field. The mechanism is generic and can be applied to any type of user-to-user secure communication.
- To the accomplishment of the foregoing and related ends, one or more embodiments comprise the features hereinafter fully described and particularly pointed out in the claims.
- The following description and the annexed drawings set forth in detail certain illustrative aspects and are indicative of but a few of the various ways in which the principles of the embodiments may be employed. Other advantages and novel features will become apparent from the following detailed description when considered in conjunction with the drawings and the disclosed embodiments are intended to include all such aspects and their equivalents.
-
Figure 1 represents the environment in which the invention is implemented; -
Figure 2 shows schematically an embodiment of the method of the invention; -
Figure 3 shows schematically another embodiment of the invention; -
Figure 4 schematically represents an user equipment wherein the invention is advantageously implemented; -
Figure 5 schematically shows a GBA compliant UICC (GBA_U UICC) as advantageously implemented in an user equipment as shown onfigure 4 . - In the following detailed description, reference is made to the accompanying drawings that show, by way of illustration, specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It is to be understood that the various embodiments of the invention, although different, are not necessarily mutually exclusive. For example, a particular feature, structure, or characteristic described herein in connection with one embodiment may be implemented within other embodiments without departing from the spirit and scope of the invention. In the drawings, like numerals refer to the same or similar functionality throughout the several views. For clarity, only those elements and steps which are useful to the understanding of the present invention have been shown in the drawings and will be described.
- Then, when an action is said to be performed by a device, it is in fact executed by a microprocessor in this device controlled by instruction codes recorded in a program memory on the said device. An action is also ascribed to an application. This means that part of the instruction codes making up the application are executed by the microprocessor.
-
Figure 1 shows a GBA environment where the invention finds its application. It comprises at least an user equipment UE connected to a Network Application Function NAF through a first interface Ua and to a Bootstrapping Server Function BSF through a second interface Ub. The both functions NAF and BSF are connected to each other through an interface Zn. - The BSF is further connected to at least a Home Subscriber Server HSS through an interface Zh. Advantageously the BSF is also connected to a Subscriber Locator Function SLF through an interface Dz. Names of different functions and interfaces are standardized in the Generic Bootstrapping Architecture standard.
-
Figure 2 schematically shows an embodiment of the invention where a session key is calculated by the NAF. In this figure a first user equipment UE1 comprises a GBA compliant integrated circuit UICC1. Such an integrated circuit UICC1 is typically a smart card introduced inside a mobile equipment ME1 also GBA compliant. This mobile equipment ME1 is advantageously a smart-phone but could also be a computer. It has however necessarily to be GBA compliant. - The invention intervenes when the user of the user equipment UE1 requests a secure voice communication to be established with another user having a second user equipment UE2. Thus the UE1 sends a request of communication REQ(ID1,ID2) to the second user equipment UE2 typically e.g. via an underlying IP Multimedia Subsystem (IMS). This request of communication REQ(ID1,ID2) includes the identifiers ID1 and ID2 of the two user equipments.
- In parallel UE1 sends a request for security association REQ(ID1,ID2,SEC) for this voice communication to a dedicated Network Application Function NAF. This triggers the establishment of a link with a Bootstrapping Server Function BSF1. This BSF1 is for example the one of the Mobile Network Operator of UE1. If no valid bootstrapped key Ks is available in the UE1, an initial bootstrapping procedure designated by curly bracket CH1(NAF) is thus launched between UE1 and BSF1. A challenge is generally sent to the user equipment UE1 that gives a response in return. The entire security is thus based on MNO's credential used to authenticate one subscriber. As it can be seen on
figure 2 , the UICC1 is implicated in the challenge response calculation. Once the challenge response is sent back to the BSF1 and also verified by the BSF1, this last one proceeds to a bootstrapped key derivation procedure to obtain bootstrapped key Ks1. - Following request REQ(ID1, ID2, SEC) from the UE1, the NAF sends request to the BSF1 in order to retrieve the NAF keys associated to the UE1. Here, as UE1 comprises a GBA compliant UICC1, two NAF keys are obtained, one external Ks_ext_NAF1 and one internal Ks_int_NAF1. Those keys are then sent to the NAF by the BSF1.
- In parallel with the procedure where UE1 is implicated, the other user equipment UE2, that received the request for communication REQ(ID1,ID2) sends a request for security association REQ(ID1,ID2,SEC) to NAF. This launches an initial bootstrapping procedure between UE2 and a second BSF2 if no valid bootstrapped key is available in the UE2. It implies the UICC2 being implicated according to the GBA requirements even if this UICC is not GBA compliant. Said procedure is designated by curly brackets CH2(NAF). Indeed, the two BSF could be the same, e.g. if the same MNO is used by the two user equipments but, on a general base, they are different.
- Here it has to be noted that, in the example shown on
figure 2 , the second UE2 consists of a mobile equipment ME2 itself GBA compliant and a UICC that is not GBA compliant. - When the procedure CH2(NAF) is ended, the BSF proceeds to key derivation for the concerned NAF from a bootstrapped key Ks2. Here a single Ks_NAF2 is obtained. This key, which is of the external type (belonging to the mobile equipment ME2), is then transferred to the NAF.
- In the embodiment shown on
figure 2 , the NAF is then calculating a session key Ks_SV for the secure voice communication in a step CAL(Ks_SV). - Then the session key Ks_SV is encrypted differently depending on the recipient UE1 or UE2. In the case, a same BSF is accessible for both user equipments, the session key calculation can also be performed in the BSF.
- For example Ks_SV = KDF(Ks_int_NAF_1, Ks_int_NAF_2, User_Param_1, User_Param_2, ...)
- User Param can be RAND, B-TID, and other attributes associated to each user's Ks_int_NAF.
- External NAF key could also be used.
- The session key (Ks_SV)Ks_ext_NAF1 encrypted with Ks_ext_NAF1 is sent to UE1 and (Ks_SV)Ks_NAF2 encrypted with Ks_NAF2 is sent to UE2. On each side, the session key is then decrypted DECKs_ext_NAF1(Ks_SV), DECKs_NAF2(Ks_SV) by mobile equipments ME1 and ME2 using respectively Ks_ext_NAF1 and Ks_NAF2. Then the communication SV can take place using the common session key Ks_SV between the two user equipments UE1 and UE2.
- Also shown on
figure 2 after OR, in a variant, session key Ks_SV can be encrypted using the internal NAF key Ks_int_NAF1. In this case, the decryption DECKs_int_NAF1(Ks_SV) is done inside the UICC1 on the side of the mobile equipment UE1 and the session key is then transferred internally to the mobile equipment ME1 for use in the secure voice communication SV. To overcome potential security attack, one would prefer to use ETSI TS 102 484 secure channel between ME and UICC. When ETSI TS102 484 secure channel is used, one additional control on the UICC side can be implemented in order to reinforce the security of the entire system. The control is to allow access to GBA functionality only if the following conditions are met: - (1) Access to GBA functionality is done through secure channel
- (2) The external application has its right to access to GBA function.
- If there is no such a control, a situation could occur where attacker tries to retrieve keys exchanged outside the secure channel by forcing the ME not to set up secure channel.
-
Figure 3 shows another embodiment of the invention where the session key is calculated locally by each of the both user equipments UE1 and UE2 using messages generated and sent by NAF. - The beginning of the method is identical with the one shown on
figure 2 . An initial bootstrapping procedure is implemented on both sides with the two user equipments. - Once the NAF received Ks_NAF2 and Ks_int_NAF1, Ks_ext_NAF1, it generates in a step GEN(MSG1,MSG2) two encrypted messages MSG1 and MSG2 each being intended to be sent to each one of the equipments UE1 and UE2.
- The message MSG2 intended to be sent in a step SD(MSG2) to UE2 includes at least the external NAF key of ME1 encrypted with the NAF key of ME2. Thus the internal NAF key of UICC1 is kept inside the NAF and is not threaten by any leak. Messages may further include identifiers and other data, for example a random that could be used for the derivation of the session key.
- In a first option, the message MSG1 intended to be sent in a step SD(MSG1) to UE1 includes at least the NAF key of ME2 encrypted with the external NAF key of ME1. This option corresponds to a case where the session key Ks_SV is calculated in a step CAL in the mobile equipment ME1 in a way similar to the one implemented in UE2. This stands after the decryption DEC of the encrypted message MSG1 using the external NAF key of ME1.
- In a second option, shown after the first OR in
figure 3 , the NAF key of the mobile equipment ME2 is encrypted using the internal NAF key of the user equipment UE1. This implies the encrypted message MSG1 to be decrypted in UICC1 with Ks_int_NAF1. Then the calculation of the session key Ks_SV can be done after transfer of the decrypted Ks_NAF2 by the UICC1 to the mobile equipment ME1 or directly inside UICC1 if the necessary resources are available in UICC1 as illustrated after the second OR. - It is here understood that this last option is the most secure for this embodiment as only the external NAF keys of the user equipments are transferred securely and all calculation to obtain the session key are done inside UICC1.
- It is here underlined that, if the user equipment UE2 would also have an integrated circuit card GBA compliant UICC2, the option could have been applied to both equipment and the obtained method would have been completely secure as only the both external NAF keys Ks_ext_NAF1 and Ks_ext_NAF2 would be transferred respectively encrypted with internal keys Ks_int_NAF2 and Ks_int_NAF1. The decryption of MSG1 and MSG2 and the calculation of the session key Ks_SV would be done in the respective UICC before being transferred to respective mobile equipment ME1 and ME2 in charge for them to establish the voice communication using the obtained session key Ks_SV. Here, using the attributes communicated with the messages enabling the construction of the session key, fine-tuned usage control is possible. In other words, UICC can do a check according to predefined security policy. For example, UICCType can be used to check if the counterpart has the correctly configured UICC and if not, it rejects the key derivation request.
-
Figure 4 schematically shows a user equipment UE wherein the invention is implemented. UE comprises a mobile equipment ME, typically a mobile phone, an integrated circuit card UICC and communication means CM including at least:
a transmitter adapted to transmit requests of communication with another user equipment, - a receiver adapted to receive requests of communication from another user equipment and receive an encrypted message enabling the calculation of a session key or directly receive an encrypted session key and
- a voice communication module to establish a communication with another equipment using said session key.
- Such communication means are not further disclosed as the man skilled in the art will be able to implement such means that can be based on wireless interfaces, advantageously, or on wired interfaces. In the GBA system, the role of UICC is fundamental as UICCs constitute distributed security tokens.
-
Figure 5 shows schematically an integrated circuit card GBA compliant UICC1 as implemented inside the user equipment offigure 4 . This UICC1 comprises a challenge processing module CPM to respond a challenge received from a BSF, a key derivation module KDM, a decryption module DM to decrypt a message containing data to calculate a session key or containing directly a session key. In the case an encrypted message comprising data to calculate a session key is received, it advantageously further includes a calculation module CAM to calculate the session key from the decrypted message. It has to be noted that UICC1 is here described with partitioned entities while such entities could be only functionality implemented inside the UICC. - The above detailed description is not to be taken in a limiting sense, and the scope of the present invention is defined only by the appended claims, appropriately interpreted, along with the full range of equivalents to which the claims are entitled.
Claims (12)
- Method to establish a secure voice communication session between two user equipments (UE1, UE2) with the help of a dedicated Network Application Functions (NAF) and of at least one Bootstrapping Server Function (BSF1, BSF2), comprising the steps of:- for a first user equipment (UE1), sending a request (REQ(ID1,ID2)) of communication with a second user equipment (UE2) and a request for security association (REQ(ID1,ID2),SEC) to a dedicated Network Application Function (NAF),- for the first user equipment (UE1), proceeding to a challenge procedure (CH1(NAF)) comprising:- for the first user equipment (UE1), establishing a link with a first Bootstrapping Server Function BSF1,- for the BSF1, transmitting a challenge to the first user equipment (UE1),- for the first user equipment (UE1), responding to the challenge transmitted by the BSF1,- for the BSF1, verifying the challenge response,- for the NAF, retrieving bootstrapping service derived NAF keys (Ks_(ext/int)_NAF1) from the BSF1,- for the second user equipment (UE2), receiving a request (REQ(ID1,ID2)) for communication with the first user equipment (UE1),- for the second user equipment (UE2), sending a request for security association (REQ(ID1,ID2),SEC) to the dedicated Network Application Function (NAF),- for the second user equipment (UE2), proceeding to a challenge procedure (CH2(NAF)) comprising:- for the second user equipment (UE2), establishing a link with a second Bootstrapping Server Function (BSF2),- for the BSF2, transmitting a challenge to the second user equipment (UE2),- for the second user equipment (UE2), responding to a challenge transmitted by the BSF2,- for the BSF2, verifying the challenge response,- for the NAF, retrieving bootstrapping service derived external and internal NAF keys (Ks_(ext/int)_NAF2) from the BSF2,the method further comprising the steps of:- calculating a session key (Ks_SV) from bootstrapping service derived external or internal NAF keys of the first and the second user equipments (Ks_(ext/int)_NAF1 and Ks_(ext/int)_NAF2) and- establishing a secured voice communication (SV) using the calculated session key (Ks_SV).
- Method according to claim 1, wherein said step of calculation (CAL(Ks_SV) of the session key (Ks_SV) is performed by the NAF that further sends the calculated session key (Ks_SV) to both equipments (UE1,UE2) encrypted with respective NAF keys.
- Method according to claim 2, wherein, at least one of the user equipment comprising a GBA_U compliant UICC, the encryption of the session key (Ks-SV) by the NAF for this user equipment uses an internal NAF key.
- Method according to claim 1, wherein it includes a step of generation (GEN(MSG1, MSG2)) by the NAF of two messages (MSG1, MSG2) comprising data to be used to calculate the session key (Ks_SV), each message (MSG1, MSG2) comprising, for a given equipment, at least a NAF key of the other equipment, encrypted with the own NAF key of said given equipment, a step of sending (SD(MSG1,SD(MSG2)) the encrypted messages (MSG1, MSG2) to both equipments and, for each equipment, a step of decryption (DEC) of the encrypted message and a step of calculation (CAL(Ks_SV)) of the session key from its own derived NAF key and the other user equipment's NAF key received in the message.
- Method according to claim 4, wherein the transferred NAF keys are external NAF keys.
- Method according to claim 4 or 5, wherein, at least one user equipment comprising a GBA_U compliant UICC, the encryption of the NAF key of the other equipment uses the internal NAF key for this user equipment.
- Method according to claim 6, wherein, the UICC further comprising a calculation module (CAM) to calculate the session key (Ks_SV), the session key is calculated inside the UICC.
- Method according to claim 1, wherein, first and second BSF being the same BSF, the NAF keys or the session key are calculated by this BSF, is retrieved by the NAF and sent to the user equipments (UE1,UE2) encrypted with respective NAF keys.
- Network Application Functions (NAF) server comprising:- a receiver to receive, from user equipments, requests of communication with another user equipment;- a retriever to retrieve bootstrapping service derived keys Ks_(ext/int)_NAF from at least one BSF for the two user equipments;- a calculation module (CAM) to calculate a session key from the bootstrapping service derived NAF keys Ks_(ext/int)_NAF1 and Ks_(ext/int)_NAF2 retrieved for the two user equipments or to generate a message for constructing the session key from each of the bootstrapping service derived NAF keys Ks_(ext/int)_NAF1 and Ks_(ext/int)_NAF2 retrieved for the two user equipments;- an encryption module to encrypt the session key or the messages using respective user equipment's NAF keys;- a transmitter to send the encrypted session key or to send the generated messages for constructing the session key to each of the two user equipments that will enable each user equipment to calculate the session key common to the two user equipments.
- GBA compliant user equipment (UE) comprising:- a challenge processing module (CPM) to respond a challenge received from a BSF,- a key derivation module (KDM),- a communication module (CM) comprising at least:- a transmitter to transmit requests of communication with another user equipment,- a receiver to receive requests of communication from another user equipment and receive a message for constructing a session key or receive an encrypted session key,- a voice communication module to establish a communication with another equipment using said session key,- a decryption module (DM) to decrypt a message for constructing the session key calculated from bootstrapping service derived external or internal NAF keys of the first and the second user equipments (Ks_(ext/int)_NAF1 and Ks_(ext/int)_NAF2),- in the case a message for constructing the session key is received, a calculation module (CAM) to calculate the session key from the message.
- GBA compliant user equipment according to claim 10, wherein it comprises an UICC including said challenge processing module (CPM), said key derivation module (KDM) and said decryption module (DM).
- GBA compliant user equipment according to claim 11, wherein said UICC further includes said calculation module (CAM).
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP14710323.8A EP2979418B1 (en) | 2013-03-27 | 2014-03-17 | Method to establish a secure voice communication using generic bootstrapping architecture |
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP13305379.3A EP2785011A1 (en) | 2013-03-27 | 2013-03-27 | Method to establish a secure voice communication using generic bootstrapping architecture |
PCT/EP2014/055328 WO2014154519A1 (en) | 2013-03-27 | 2014-03-17 | Method to establish a secure voice communication using generic bootstrapping architecture |
EP14710323.8A EP2979418B1 (en) | 2013-03-27 | 2014-03-17 | Method to establish a secure voice communication using generic bootstrapping architecture |
Publications (2)
Publication Number | Publication Date |
---|---|
EP2979418A1 EP2979418A1 (en) | 2016-02-03 |
EP2979418B1 true EP2979418B1 (en) | 2018-11-28 |
Family
ID=48236821
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP13305379.3A Withdrawn EP2785011A1 (en) | 2013-03-27 | 2013-03-27 | Method to establish a secure voice communication using generic bootstrapping architecture |
EP14710323.8A Active EP2979418B1 (en) | 2013-03-27 | 2014-03-17 | Method to establish a secure voice communication using generic bootstrapping architecture |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP13305379.3A Withdrawn EP2785011A1 (en) | 2013-03-27 | 2013-03-27 | Method to establish a secure voice communication using generic bootstrapping architecture |
Country Status (4)
Country | Link |
---|---|
US (1) | US20160044505A1 (en) |
EP (2) | EP2785011A1 (en) |
JP (1) | JP2016519873A (en) |
WO (1) | WO2014154519A1 (en) |
Families Citing this family (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR20150139602A (en) * | 2013-04-05 | 2015-12-11 | 인터디지탈 패튼 홀딩스, 인크 | Securing peer-to-peer and group communications |
EP3216250B1 (en) * | 2014-11-06 | 2021-03-10 | Samsung Electronics Co., Ltd. | Bootstrapping wi-fi direct communication by a trusted network entity |
EP3248351A1 (en) * | 2015-01-19 | 2017-11-29 | Telefonaktiebolaget LM Ericsson (publ) | Methods and apparatus for direct communication key establishment |
WO2016116191A1 (en) * | 2015-01-19 | 2016-07-28 | Telefonaktiebolaget Lm Ericsson (Publ) | Methods and apparatus for direct communication key establishment |
CN106487501B (en) | 2015-08-27 | 2020-12-08 | 华为技术有限公司 | Key distribution and reception method, key management center, first network element and second network element |
US10957445B2 (en) | 2017-10-05 | 2021-03-23 | Hill-Rom Services, Inc. | Caregiver and staff information system |
CN113015159B (en) * | 2019-12-03 | 2023-05-09 | 中国移动通信有限公司研究院 | Initial security configuration method, security module and terminal |
CN114338618A (en) * | 2020-10-10 | 2022-04-12 | 中国电信股份有限公司 | Multi-party call method, system, conference server and electronic equipment |
CN113242549B (en) * | 2021-04-29 | 2022-10-28 | 中国联合网络通信集团有限公司 | Data processing method, mobile device, UICC (Universal Integrated Circuit card) and terminal |
Family Cites Families (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB0409496D0 (en) * | 2004-04-28 | 2004-06-02 | Nokia Corp | Subscriber identities |
US8046824B2 (en) * | 2005-04-11 | 2011-10-25 | Nokia Corporation | Generic key-decision mechanism for GAA |
US20070101122A1 (en) * | 2005-09-23 | 2007-05-03 | Yile Guo | Method and apparatus for securely generating application session keys |
US7835528B2 (en) * | 2005-09-26 | 2010-11-16 | Nokia Corporation | Method and apparatus for refreshing keys within a bootstrapping architecture |
US8122240B2 (en) * | 2005-10-13 | 2012-02-21 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and apparatus for establishing a security association |
WO2007085779A1 (en) * | 2006-01-24 | 2007-08-02 | British Telecommunications Public Limited Company | Method and system for recursive authentication in a mobile network |
US8613058B2 (en) * | 2007-05-31 | 2013-12-17 | At&T Intellectual Property I, L.P. | Systems, methods and computer program products for providing additional authentication beyond user equipment authentication in an IMS network |
CN101822082B (en) * | 2007-10-05 | 2013-06-12 | 交互数字技术公司 | Techniques for secure channelization between UICC and terminal |
ES2589112T3 (en) * | 2007-11-30 | 2016-11-10 | Telefonaktiebolaget Lm Ericsson (Publ) | Key management for secure communication |
US8386767B2 (en) * | 2008-08-15 | 2013-02-26 | Telefonaktiebolaget L M Ericsson (Publ) | Methods and systems for bootstrapping security key information using session initiation protocol |
WO2011160683A1 (en) * | 2010-06-22 | 2011-12-29 | Telefonaktiebolaget Lm Ericsson (Publ) | Privacy preserving authorisation in pervasive environments |
US20130163762A1 (en) * | 2010-09-13 | 2013-06-27 | Nec Corporation | Relay node device authentication mechanism |
US8509431B2 (en) * | 2010-09-20 | 2013-08-13 | Interdigital Patent Holdings, Inc. | Identity management on a wireless device |
US9578041B2 (en) * | 2010-10-25 | 2017-02-21 | Nokia Technologies Oy | Verification of peer-to-peer multimedia content |
US8346287B2 (en) * | 2011-03-31 | 2013-01-01 | Verizon Patent And Licensing Inc. | Provisioning mobile terminals with a trusted key for generic bootstrap architecture |
US8990554B2 (en) * | 2011-06-30 | 2015-03-24 | Verizon Patent And Licensing Inc. | Network optimization for secure connection establishment or secure messaging |
CN104247485B (en) * | 2012-04-26 | 2019-02-05 | 瑞典爱立信有限公司 | Network application function authorization in Generic Bootstrapping Architecture |
CN104756458B (en) * | 2012-10-29 | 2018-07-10 | 瑞典爱立信有限公司 | For protecting the method and apparatus of the connection in communication network |
-
2013
- 2013-03-27 EP EP13305379.3A patent/EP2785011A1/en not_active Withdrawn
-
2014
- 2014-03-17 EP EP14710323.8A patent/EP2979418B1/en active Active
- 2014-03-17 US US14/780,475 patent/US20160044505A1/en not_active Abandoned
- 2014-03-17 WO PCT/EP2014/055328 patent/WO2014154519A1/en active Application Filing
- 2014-03-17 JP JP2016503629A patent/JP2016519873A/en active Pending
Non-Patent Citations (1)
Title |
---|
None * |
Also Published As
Publication number | Publication date |
---|---|
EP2979418A1 (en) | 2016-02-03 |
US20160044505A1 (en) | 2016-02-11 |
JP2016519873A (en) | 2016-07-07 |
EP2785011A1 (en) | 2014-10-01 |
WO2014154519A1 (en) | 2014-10-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP2979418B1 (en) | Method to establish a secure voice communication using generic bootstrapping architecture | |
US10943005B2 (en) | Secure authentication of devices for internet of things | |
JP5894304B2 (en) | Method and apparatus for self-configuring a base station | |
CN111052672B (en) | Secure key transfer protocol without certificate or pre-shared symmetric key | |
EP2039199B1 (en) | User equipment credential system | |
EP2522100B1 (en) | Secure multi-uim authentication and key exchange | |
US8559633B2 (en) | Method and device for generating local interface key | |
US10694376B2 (en) | Network authentication method, network device, terminal device, and storage medium | |
US8726023B2 (en) | Authentication using GAA functionality for unidirectional network connections | |
Liu et al. | Toward a secure access to 5G network | |
US11582233B2 (en) | Secure authentication of devices for Internet of Things | |
GB2586549A (en) | Communicating with a machine to machine device | |
EP2845362A1 (en) | Secure communications for computing devices utilizing proximity services | |
US11316670B2 (en) | Secure communications using network access identity | |
EP4295531A1 (en) | A method for operating a cellular network | |
WO2017160227A1 (en) | Method and system for key generation and service-based authentication in mobile network | |
EP1844595B1 (en) | Authentication using GAA functionality for unidirectional network connections | |
KR101431214B1 (en) | Mutual authentication method and system with network in machine type communication, key distribution method and system, and uicc and device pair authentication method and system in machine type communication | |
US20230108626A1 (en) | Ue challenge to a network before authentication procedure |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20151027 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
DAX | Request for extension of the european patent (deleted) | ||
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R079 Ref document number: 602014036880 Country of ref document: DE Free format text: PREVIOUS MAIN CLASS: H04L0029060000 Ipc: H04W0012060000 |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: GRANT OF PATENT IS INTENDED |
|
RIC1 | Information provided on ipc code assigned before grant |
Ipc: H04W 12/04 20090101ALI20180607BHEP Ipc: H04W 12/06 20090101AFI20180607BHEP Ipc: H04L 29/06 20060101ALI20180607BHEP |
|
INTG | Intention to grant announced |
Effective date: 20180622 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE PATENT HAS BEEN GRANTED |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: EP |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: REF Ref document number: 1071722 Country of ref document: AT Kind code of ref document: T Effective date: 20181215 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 602014036880 Country of ref document: DE |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: FG4D |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: MP Effective date: 20181128 |
|
REG | Reference to a national code |
Ref country code: LT Ref legal event code: MG4D |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MK05 Ref document number: 1071722 Country of ref document: AT Kind code of ref document: T Effective date: 20181128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20190228 Ref country code: AT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: NO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20190228 Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20190328 Ref country code: ES Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: HR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20190301 Ref country code: AL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: SE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: RS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20190328 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R097 Ref document number: 602014036880 Country of ref document: DE |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: SM Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
RAP2 | Party data changed (patent owner data changed or rights of a patent transferred) |
Owner name: THALES DIS FRANCE SA |
|
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 Ref country code: SI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
26N | No opposition filed |
Effective date: 20190829 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190317 |
|
REG | Reference to a national code |
Ref country code: BE Ref legal event code: MM Effective date: 20190331 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CH Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190331 Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190317 Ref country code: LI Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190331 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: BE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190331 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: TR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MT Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20190317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20140317 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20181128 |
|
P01 | Opt-out of the competence of the unified patent court (upc) registered |
Effective date: 20230517 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20240220 Year of fee payment: 11 Ref country code: GB Payment date: 20240221 Year of fee payment: 11 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: IT Payment date: 20240220 Year of fee payment: 11 Ref country code: FR Payment date: 20240220 Year of fee payment: 11 |